space-cloud icon indicating copy to clipboard operation
space-cloud copied to clipboard

Add support to block internet egress in services

Open YourTechBud opened this issue 5 years ago • 0 comments

The problem faced currently?

Sometimes it is necessary to block internet egress in services. While istio supports doing this, we don't. We should add support for this.

How can we solve it?

The sidecar config for istio already supports restricting egress as shown here: https://istio.io/latest/docs/reference/config/networking/sidecar/#OutboundTrafficPolicy-Mode. Currently we set it as ALLOW_ANY with no means of changing it. In the service config, we should add a outboundTrafficPolicy to accept this parameter.

If you want this feature to be implemented, give it a thumbs up reaction, so that we can determine which features are important to you. 👍

YourTechBud avatar Sep 24 '20 06:09 YourTechBud